use tls for both connections